Pebble - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Pebble published at the 'play' market has multiple vulnerabilities...

D-Link '/improtexport.php' Multiple Series Products SQL Injection Vulnerability

D-Link DAR-8000-X series and DAR-7000-x series Internet Access Behavior Audit Gateways provide Internet access behavior management solutions. An SQL injection vulnerability exists in several D-Link series products. The vulnerability generates a file in /improtexport.php, where previous defenses a...

PHP 'php_base64_encode()' function integer overflow vulnerability

PHP is an open source general-purpose computer scripting language. The PHP 'phpbase64encode' function integer overflow vulnerability allows an attacker to exploit the vulnerability to execute arbitrary code in the context of a user's affected application, or a failed attack will result in a denia...

Python Keylogger: Radium

Python Keylogger With Multiple Features Keystroke logging, often referred to as keylogging or keyboard capturing, is the action of recording logging the keys struck on a keyboard, typically covertly, so that the person using the keyboard is unaware that their actions are being monitored. Keyloggi...

Stepic.org: Free Courses - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Stepic.org: Free Courses published at the 'play' market has multiple vulnerabilities...

Dropbox: XSS in OAuth Redirect Url

Hello guys, I found a XSS vulnerability in the OAuth Redirect Url parameter . So deep into the bug : Go to https://www.dropbox.com/developers/ Create an application In Redirect URIs , if you try to add javascript:alert1 it will tell you that javascript protocol is not accepted. But if you try to...

Yandex.Navigator - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yandex.Navigator published at the 'play' market has multiple vulnerabilities...

Yandex.Disk - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Yandex.Disk published at the 'play' market has multiple vulnerabilities...

Spectral Match:Match d Colors - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Spectral Match:Match d Colors published at the 'play' market has multiple vulnerabilities...

Phoenix Exploit Kit - Remote Code Execution (Metasploit)

Exploit for php platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Phoenix Exploit Kit Remote Code Execution', 'Description' = %q This module...

Internet Bug Bounty: integer overflow in base64_decode caused heap corruption

Please check: https://bugs.php.net/bug.php?id=72836...

Mi Fit - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Mi Fit published at the 'play' market has multiple vulnerabilities...

United Airlines - Base64 encoded String, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application United Airlines published at the 'play' market has multiple vulnerabilities...

FreePBX 13/14 - Remote Command Execution / Privilege Escalation

!/usr/bin/env python -- coding, latin-1 -- DESCRIPTION FreePBX 13 remote root 0day - Found and exploited by pgt @ nullsecurity.net AUTHOR pgt - nullsecurity.net DATE 8-12-2016 VERSION freepbx0day.py 0.1 AFFECTED VERSIONS FreePBX 13 & 14 System Recordings Module versions: 13.0.1beta1 - 13.0.26...

OLX: XSS on Meta Tag at https://m.olx.ph

Hi, There is improper validation at q parameter on https://m.olx.ph/ where it can be manipulated by an attacker to include his/her XSS payload to execute javascript code. As example: https://m.olx.ph/all-results?q=0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgndGVzdDMnKTwvc2NyaXB0Pg"...

NBA LIVE Mobile - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application NBA LIVE Mobile published at the 'play' market has multiple vulnerabilities...

Gratipay: Avoid "resend verification email" confusion

Let's assume Alice has a Gratipay account https://gratipay.com/alice and an [email protected] email 1. Mallory creates an a‎1‎[email protected] email address, base64-encodes it, and sends Alice a link https://gratipay.com/alice/emails/verify.html?email2=YTFpY2VAZm9vLmNvbQ&nonce=x 2. When Alice opens the...

AnyBalance (balance on screen) - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application AnyBalance balance on screen published at the 'play' market has multiple vulnerabilities...

CARD WARS-RPG-Strategiespiel - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CARD WARS-RPG-Strategiespiel published at the 'play' market has multiple vulnerabilities...

Kate Mobile Lite для ВКонтакте - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Kate Mobile Lite для ВКонтакте published at the 'play' market has multiple vulnerabilities...